Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: DgMBfaDFRWu9Qxnu9tQx4hIjuQSI3R4r/IvvJbkFAhI=
Subject key identifier: E6:D4:32:75:25:0A:36:1D:9E:06:39:A4:60:32:C7:EB:40:BC:F7:58
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 019FA1F229D17DE731D0D647A067A7DEAEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 04D5
Signing time: Mon 27 Jul 2026 05:00:29 +0000
Manifest this update: Mon 27 Jul 2026 05:00:29 +0000
Manifest next update: Tue 28 Jul 2026 05:00:29 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: bz6yVFH8X94D6jmjsXHaomv9hPolhP1fhaEcl5Kt4XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:29:d1:7d:e7:31:d0:d6:47:a0:67:a7:de:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Jul 27 05:00:29 2026 GMT
Not After : Jul 28 05:00:29 2026 GMT
Subject: CN=e6d43275250a361d9e0639a46032c7eb40bcf758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:ee:16:2c:01:4b:59:1f:99:50:a6:73:cc:
a7:96:7a:6c:15:47:b3:03:29:1a:0c:04:10:3e:44:
a6:40:b9:a4:a1:46:d9:95:e7:56:55:e9:af:fc:59:
9a:57:4e:8c:69:96:46:2e:a0:df:38:83:98:c5:ab:
3f:94:02:b6:16:b3:b5:f5:1b:c7:26:0e:0b:42:ef:
6f:03:fb:d3:19:70:53:09:4c:fc:44:87:86:e0:12:
7a:30:3e:1d:9b:50:79:fd:6b:35:fa:c8:6d:a7:3f:
b9:c6:bb:29:ed:95:a9:1a:ab:94:80:c8:68:b9:41:
a9:60:61:f6:3a:e6:af:96:19:81:98:7f:6b:06:26:
4d:b9:a7:20:ea:8f:4e:e3:c3:25:f8:37:ac:b6:94:
2b:99:c2:19:30:e2:ec:b7:ab:a9:df:35:53:cf:5d:
57:7a:3e:bf:99:98:57:cc:c9:98:6a:fd:1b:17:18:
f7:47:b2:43:1d:ea:38:73:62:42:55:9b:54:90:c6:
43:e0:50:61:b5:8f:9a:b5:49:87:a5:b5:17:0b:4b:
b1:c3:dd:4f:aa:d2:0d:51:15:a3:72:7a:74:1e:fc:
09:c9:46:c6:1e:e0:60:39:95:0d:8b:69:e8:cd:13:
b1:bb:f3:34:9e:b7:cd:24:b3:8b:3f:02:86:c2:8b:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:32:75:25:0A:36:1D:9E:06:39:A4:60:32:C7:EB:40:BC:F7:58
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:12:57:e9:43:7d:b4:94:c2:a7:61:93:9c:47:9e:10:56:
6b:e9:cb:1b:ea:79:b7:9d:9d:ac:a9:3b:82:d8:fc:60:d6:d1:
41:9a:fd:7c:50:78:1f:2f:00:37:d4:6b:a5:00:97:69:97:77:
1f:ff:c5:df:64:94:c3:93:74:9c:a0:e5:65:eb:21:2b:87:40:
e9:d5:91:b1:77:c0:fa:3b:95:e3:d5:3b:c1:41:1a:53:5d:da:
96:a9:b0:6e:61:21:b6:ab:97:7f:a2:fc:aa:7e:e3:f4:fa:a7:
6f:c4:63:45:99:7d:a6:29:74:ed:6f:78:e6:f8:10:13:d9:57:
4c:22:88:86:f2:14:b0:22:d9:36:84:c6:c3:bb:16:2c:b5:44:
15:45:2e:af:bb:ed:dc:f7:08:d7:3b:df:9d:ac:02:79:fe:f2:
05:49:f9:9c:38:2b:0d:46:14:e3:d0:01:6a:ba:8e:d4:3b:8f:
aa:76:6d:e6:83:f2:8a:52:a7:04:dc:43:c1:49:c7:33:14:c3:
9e:86:28:a0:91:f2:4d:8d:85:e3:4b:c8:41:f2:4a:63:05:d6:
e1:8a:3b:d8:e5:b8:1e:d6:c5:26:ab:9b:f2:be:44:43:6e:9d:
87:ac:42:bb:73:ed:24:fe:30:74:83:5c:a4:79:84:75:ff:a6:
08:ba:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:58:18 2026 by rpki-client